CVE-2011-4950: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in phpgwapi/js/jscalendar/test.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

PT-2012-2016

Name of the Vulnerable Software and Affected Versions EGroupware Enterprise Line versions prior to 11.1.20110804-1 EGroupware Community Edition versions prior to 1.8.001.20110805 Description The issue allows remote attackers to inject arbitrary web script or HTML via the lang parameter in the...

PT-2011-1742

Name of the Vulnerable Software and Affected Versions JoomlaSeller JS Calendar com jscalendar component versions 1.5.1 and 1.5.4 for Joomla! Description The issue allows remote attackers to inject arbitrary web script or HTML via the month and year parameters in a "jscalendar" action to...

PT-2011-1743

Name of the Vulnerable Software and Affected Versions Joomla! component com jscalendar versions 1.5.1 through 1.5.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the ev id parameter in a details action to the "index.php" endpoint...